CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action via the wps_sfw_install_plugin_configuration AJAX handler. This makes it possible for authenticated attackers, with shop manager-level access and above, to install and activate arbitrary WordPress.org plugins.
Explanation of Vulnerability in Simple Terms
The Subscriptions for WooCommerce plugin through version 2.0.0 contains an authorization flaw that allows high-privileged users to read, modify, or delete sensitive data. An authenticated administrator or shop manager can access subscription records and customer information they should not be able to view or alter. Sites running affected versions should update immediately to prevent unauthorized data exposure.
What an attacker can do
Read, modify, or delete subscription data and customer information without proper authorization checks.
Potential impact on your site
Malicious admins or compromised admin accounts can access or alter customer subscription data and payment records.
Conditions required to exploit
Attacker must have high-level admin or shop manager credentials on the WordPress site.
Key dates
External resources
Related vulnerabilities
